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METHOD OF COMMUNICATING BETWEEN DIFFERENT ELECTRONIC 

ENTITIES 

The invention relates to a method of communicating 
between different electronic entities. 

It applies to communication systems that use a 
communication protocol of the command-response type. In 
systems of this type, a communication management unit 
controls at least part of the process of communication 
between a set of electronic entities by sending commands to 
each of the electronic entities of this set which, after 
processing these commands they receive, which may entail 
complex calculations, merely respond to those commands. 

The communication management unit may be a 
terminal, for example, which may form part of the set of 
communicating electronic entities. This is the case with 
bank cards and payment terminals used at present, for 
example. The terminal executes a program for controlling 
the process of communication between itself and the 
microcircuit bank card. 

It is estimated that over the next two to three 
years there will emerge a requirement for applications 
enabling communication between a plurality of electronic 
entities, in particular secure portable entities. By then 
robust and dynamic communication mechanisms will be needed. 
For example, electronic entities may frequently and without 
warning find themselves out of communication range. The 
problem of the potential loss of messages being broadcast 
may then arise. 

An object of the present invention is to solve this 

problem. 

To this end, the invention proposes a method of 
communication between at least two electronic entities, 
said method involving a communication management unit that 
employs a command-response protocol to communicate with 
said electronic entities, this method being remarkable in 
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that at least one of said electronic entities communicates 
with the communication management unit using a wireless 
technology and in that it includes a step consisting in 
storing a list of said electronic entities in the 
communication management unit. 

The above method, which is particularly suitable 
for a command-response protocol, thus authorizes the 
intermittent presence of one or more electronic entities 
within the radius of action of the communication management 
unit without loss of messages being broadcast, given that 
only the messages to be sent or to be received by the 
electronic entities contained in the list stored in the 
communication management unit will be processed. The 
expression "radius of action" means the region within which 
communication is possible between the communication 
management unit and the electronic entities. One non- 
limiting example of a radius of action is a radio-frequency 
field. By extension, the radius of action also includes 
cable connections between the communication management unit 
and certain electronic entities. 

The communication management unit is referred to as 
a logical processing unit (LPU) in the context of 
application of the invention to microcircuit cards using a 
contactless communication technology. The invention is 
particularly suited to electronic entities of this kind. In 
this application, an LPU communicates with contactless 
microcircuit cards within its radio-frequency field. This 
is because the LPU is provided with a contactless reader 
whose structure is known in the art but which is used in an 
unconventional way, in an environment with a plurality of 
microcircuits . It is used unconventionally in the sense 
that it provides communication between the different 
electronic entities that are simultaneously within the 
field of the LPU, in contrast to the standard situation in 
which, if a plurality of microcircuits are within the field 
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of the LPU, a single one of them is selected to communicate 
with the LPU. The LPU may be a simple standard personal 
computer ( PC) . 

The electronic entities of a set E controlled by 
5 the LPU communicate with the latter by radio frequency 
using a capacitive or inductive coupling mechanism defined 
in the ISO/IEC 14443, 15693 or 18000 standards. The 14443 
standard applies to identification cards known as proximity 
cards (approximately 10 cm range): "Identification Cards - 

10 Contactless integrated circuit (s) cards - Proximity cards 11 . 

The 15693 standard applies to identification cards known as 
vicinity cards (approximately 70 cm range) : " Identification 
Cards - Contactless integrated circuit (s) cards - Vicinity 
cards". The draft 18000 standard applies to radio-frequency 

15 communication identity tags and to different frequencies 
(125 kHz, 13.56 MHz , 443 MHz, 900 MHz, etc.). 

Radio-frequency applications (WiFi, BlueTooth, 
etc.) are not targeted by the invention a priori. The 
invention could nevertheless apply to them in a command- 

20 response communication scheme using a communication 
management unit. The invention may equally be applied to 
communications involving contact, for example using a 
microcircuit card to the ISO 7816 standard. 

Generally, but not necessarily, the LPU supplies 

25 energy to the communicating entities. 

According to one particular feature, the electronic 
entities constitute a network of acquaintances, i.e. a list 
of entities in the radius of action of the communication 
management unit and able to communicate with each other. 

30 This network of acquaintances has the advantage of 

being dynamic. When the system is started up it may be 
either empty or preprogrammed to contain one or more 
electronic entities . 

According to one particular feature, the method 

35 includes a step of adding a new electronic entity to the 
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network of acquaintances as a function of at least one 
predetermined criterion if the list of entities stored in 
the communication management unit includes that new 
electronic entity . 
5 Accordingly, if a new electronic entity E enters 

into communication with the communication management unit, 
either by connecting physically to it or by entering its 
radius of action, that entity E is added to the network of 
acquaintances, and is stored therein as an acquaintance of 

10 an entity P already in the network if and only if P and E 
communicate with each other subsequently. A criterion C may 
be used to determine this acquaintanceship, for example the 
nature of the entity. The criterion C depends primarily on 
the application. The network of acquaintances may contain 

15 only two entities, or be reduced to a simple list if all 
the entities in the radius of action of the communication 
management unit are able to communicate with each other. 

According to one particular feature, the 
communication method of the invention includes a step of 

20 storing a message intended for at least one of said at 
least two electronic entities if the addressee electronic 
entity is temporarily out of range of the communication 
management unit. 

This avoids the loss of messages if an entity 

25 temporarily leaves the radius of action of the 
communication management unit. As indicated above, the 
intermittent presence of an electronic entity in the radius 
of action of the communication management unit is therefpre 
possible . 

30 According to one particular feature, a unique 

identifier is associated with each of said at least two 
electronic entities . 

This constitutes a simple means of designating and 
identifying each electronic entity. If the electronic 

35 entities are microcircuit cards, the 7816-6/AMl standard 



WO 2004/088569 



PCT7FR2004/000556 



specifies a fabricator identifier and the construction of a 
unique identifier for each microcircuit . 

According to one particular feature, each 
identifier is associated with a service code or application 
5 family code (as defined in the ISO 14443 standard) . 

This enables the electronic entities to be 
classified according to their nature and their application 
so that their designation and their identification may be 
specified . 

10 According to one particular feature, the 

communication method includes a step of creating a mailbox 
in the communication management unit when the list of 
entities that is stored therein includes a new electronic 
entity, this mailbox being adapted to receive and store 

15 messages sent to or sent by the new electronic entity. 

Messages awaiting processing are thus saved in this 

mailbox . 

One particular embodiment of the method includes 
steps in which the communication management unit: 
20 - scans the list of electronic entities, 

- asks each electronic entity if it has a message 
to send, and if so: 

- stores this message in a mailbox, 

- sends the message to the electronic entity that 
25 is the addressee of the message when it can be contacted, 

and then: 

- eliminates the message from the mailbox. 

Thus the list and the mailbox enable simple and 
effective management of messages by the communication 
30 management unit. 

This mailbox is an inbox, for example, i.e. it may 
contain messages waiting to be sent to the associated 
entity . 

This is the most common situation. 
35 One particular embodiment of the communication 
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method involves at least three electronic entities and 
combines the communication management unit with one of the 
electronic entities . 

The communication management unit is therefore 
5 referred to as a "participant" in that it participates in 
the exchange of messages with the other electronic 
entities . 

According to one particular feature, the 
communication management unit serves as a proxy, i.e. an 
10 intermediary, for accessing at least one of the electronic 
entities . 

This supplementary function of the communication 
management unit is practical and simple to implement. 

According to one particular feature, the method 
15 includes a step of assigning a time to live to each message 
awaiting reception by an addressee electronic entity. 

This enables messages whose addressee has been out 
of contact for a long time to be eliminated. Depending on 
the requirements of the application, this time to live may 
20 be set to a special value (for example 0) to eliminate 
messages as soon as it is detected that their addressee is 
out of range of the communication management unit. 

According to one particular feature, the method 
includes a step of assigning a priority to each message 
25 exchanged in the context of the command-response protocol. 

This enables the communication mechanism to process 
priority messages first. 

The communication method of the present invention 
is adapted to broadcast a message from one of the at least 
30 two electronic entities to all the other electronic 
entities . 

This enables the provision of call offering 
mechanisms, for example, whereby an entity requiring a 
particular service sends a broadcast message of this kind 
35 to all the known entities of the system in order to receive 
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one or more proposals for the provision of this service. 

In one particular embodiment, at least one of the 
electronic entities is portable. 

Thus all the practical advantages of portability 
5 are available. 

In one particular embodiment, at least one of the 
electronic entities communicates with the communication 
management unit using a contactless technology. 

This enables numerous applications. The electronic 
10 entity may dispense with batteries and may therefore be 
implemented in a very compact form. 

In a particular embodiment, at least one of the 
electronic entities is secure. 

The invention therefore finds a special application 
15 to communication between different secure electronic 
entities . 

At least one of the electronic entities may be a 
contactless microcircuit card, such as a contactless bank 
card, a contactless access control card, or a contactless 
20 identity card. These examples are not limiting on the 
invention . 

More generally, at least one of the electronic 
entities may be a loyalty card or a payment card. 

In one particular embodiment, the method of the 
25 invention ensures continuity of communication involving one 
of the electronic entities and an antenna from a plurality 
of antennas connected to the communication management unit 
when that electronic entity is moving in such a manner that 
the aforementioned communication involves another antenna 
30 from the plurality of antennas mentioned above. 

In one special application of the present 
invention, the electronic entities participate in a process 
of personalizing a contactless object and the process 
includes at least one step of mutual authentication of the 
35 electronic entities, reciprocal or otherwise. 



WO 2004/088569 



PCT/FR2004/000556 



This in particular enables verification that all 
the electronic entities participating in the 
personalization process are authorized to do so. 

In one particular embodiment of this application, 
5 the personalization process includes passing the object to 
be personalized in front of a plurality of stations each 
including wireless communication means connected to the 
communication management unit and the method ensures 
continuity of the personalization process when the object 
10 passes from one station to the next. 

In the same embodiment of the same application, the 
object may communicate with the plurality of stations using 
a contactless technology. 

This technology is particularly adapted to travel 
15 documents and official documents, which increasingly, in 
their electronic version, use this technology for practical 
reasons. For example, a passport may retain its original 
format with a microcircuit inserted into the paper of the 
passport using the contactless communication technology. 
20 The present invention enables easy and robust Java 

Remote Method Invocation (RMI) communication between the 
different electronic entities of the system. 

Other aspects and advantages of the invention will 
become apparent on reading the following detailed 
25 description of particular embodiments of the invention, 
which are provided by way of nonlimiting example. The 
description is given with reference to the accompanying 
drawings, in which: 

- figure 1 is a diagram of a communication 
30 management unit and different electronic entities using the 

present invention; 

- figure 2 is a flowchart of the main steps 
executed upon the implementation of one particular 
embodiment of the communication method of the present 

35 invention; 
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- figure 3 is a flowchart of the main steps 
executed upon the arrival of a new electronic entity in the 
radius of action of one particular embodiment of the 
communication management unit of the invention; and 
5 - figure 4 is a diagram of one particular 

embodiment of a device of the present invention for 
personalizing objects . 

As shown in figure 1, one particular embodiment of 
the communication method of the present invention uses a 

10 logical processing unit (LPU) 10 that functions as a 
communication management unit using a command-response 
communication protocol and therefore controls at least part 
of the process of communication between a plurality of 
electronic entities 12±, 12 2 , 12 3 . 

15 Here the electronic entities 12 x and 12 2 are 

microcircuit cards each provided with an antenna and 
communicating with the LPU 10 using a contactless 
technology and the electronic entity 12 3 is a secure 
hardware module (SHM) and communicates with the LPU 10 via 

20 a cable connection. However, more generally, the electronic 
entities 12i and 12 2 may communicate with the LPU 10 using 
a wireless technology conforming to the BlueTooth, WiFi, 
etc. standards. The radius of action of the LPU 10 is 
represented in dashed lines in the drawing and here 

25 corresponds to the region subjected to a radio-frequency 
field. 

The communication method of the present invention 
includes a step of storing in the LPU 10 a list of the 
electronic entities that are able to communicate with it 
30 (labeled "list" in the drawing). 

The electronic entities 12 lf 12 2 and 12 3 form a 
network of acquaintances, i.e. they are able to exchange 
messages . 

As described in the introduction, this network of 
35 acquaintances is dynamic in the sense that it evolves as a 
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function of the arrival of one or more new electronic 
entities in the radius of action of the LPU 10 or, 
conversely, upon the departure of one or more electronic 
entities from that radius of action. 
5 Accordingly, when the electronic entity 12 4 , which 

here is a contactless microcircuit card (but could equally 
well communicate with the LPU using a wireless technology 
conforming to the BlueTooth, WiFi, etc. standards), enters 
into communication with the LPU 10, on arriving in its 

10 radio-frequency field, not only is that entity added to the 
list stored in the LPU 10 but also the new entity 12 4 is 
registered as an acquaintance of the entity 12i if and only 
if both these entities communicate with each other 
subsequently and, similarly, the new entity 12 4 is 

15 registered as an acquaintance of the entity 12 2 if and only 
if these two entities communicate with each other 
subsequently and the new entity 12 4 is registered as an 
acquaintance of the entity 12 3 if and only if these two 
entities communicate with each other subsequently. For 

20 determining these acquaintances, a criterion C may be used 
such as two entities of the same type being able to 
communicate with each other, for example. 

Moreover, for each of the entities 12i, 12 2 and 12 3 
in the system the LPU 10 manages a mailbox that stores 

25 messages awaiting processing. For example, if the 
electronic entity 12 2 temporarily leaves the radio- 
frequency field and the LPU 10 then receives a message for 
the entity 12 2 , that message is stored in the mailbox 
assigned to the entity 12 2 until the entity 12 2 returns to 

30 the radio-frequency field. Similarly, if the entity 12 3 
disconnects temporarily from the LPU 10 and the LPU 10 then 
receives a message for the entity 12 3 , that message is 
stored in the mailbox assigned to the entity 12 3 until the 
entity 12 3 reconnects to the LPU 10. 

35 When the new entity 12 4 enters the network, a 
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mailbox is created in the LPU for that entity and contains 
messages awaiting processing by the new entity 12 4 . 

An electronic entity is eliminated from the network 
if it leaves the radio-frequency field or is physically 
5 disconnected from the LPU 10, and if its mailbox is empty 
and none of its acquaintances has a message for it. 

Each electronic entity is identified by a unique 
identifier. Typically the identifier described in Part 3 of 
the ISO 14443 standard or in the ISO 7816-6/AM1 standard is 

10 chosen. This identifier is advantageously associated with a 
service or family code describing the options supported by 
the entity and forming part of the criterion C of 
acquaintanceship between entities. 

Accordingly, if the entity 12 1 wishes to send a 

15 message to the entity 12 2 , it can do so by indicating the 
identifier of the entity 12 2 or by specifying only the 
service or family code of the entity 12 2 . In this case, the 
LPU 10 always chooses the same addressee for the same 
service or family code from one message to another. * 

20 Alternatively, and depending on the nature of the 
application, any deterministic or non-deterministic method 
may be used to choose the addressee of a message by means 
of its service or family code. 

The figure 2 flowchart shows the main steps 

25 executed by the LPU 10 on implementing a communication 
process conforming to the invention. 

The LPU 10 scans the list of electronic entities. 
For each entity E of the network (step E80), the LPU 10 
tests whether the mailbox B assigned to the entity E is 

30 empty (test E82) . If the mailbox B is empty, the LPU 10 
sends an interrogation message to the entity E (step E84). 
The LPU 10 then tests whether the entity E sends back an 
acknowledgement (test E86) . If the entity E sends back an 
acknowledgement, the LPU 10 effects the same exchange with 

35 the next electronic entity (steps E82, E84, E86) . 
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If not, i.e. if the entity E does not send back an 
acknowledgement, the LPU 10 tests whether the entity E 
responds that it has a message M to send to an entity D 
(test E88) . If the entity E has a message M for the entity 
5 D, the LPU 10 places the message M in the mailbox of the 
entity D, whereupon the process resumes for the next 
electronic entity, starting from the test E82. 

If, during the test E88, the entity E no longer 
responds, the LPU 10 eliminates the entity E from the 

10 network, after which the process resumes for the next 
electronic entity, starting from the test E82. 

If, during the test E82, the mailbox B of the 
entity E is not empty, the LPU 10 sends the entity E the 
oldest message M from the mailbox B (step E94) . The LPU 10 

15 then tests if the entity E sends back an acknowledgement of 
the message M (test E96) . If not, the process resumes for 
the next electronic entity, starting from the test E82. 
Otherwise, i.e. if the entity E acknowledges receiving the 
message M, the LPU 10 eliminates the message M from the 

20 mailbox B (step E98) . In the most usual situation, B is an 
inbox, but B could instead be an outbox. 

The figure 3 flowchart summarizes the mechanism 
following the arrival (step E30) of a new electronic entity 
in the radius of action of the LPU 10. The LPU 10 creates a 

25 mailbox B for the entity E (step E32) and then tests 
whether the criterion C determining the addition of the 
entity E to the network of acquaintances is satisfied (test 
E34) . If this is the case, the LPU 10 adds the entity E to 
the network of acquaintances (step E36) and, for each 

30 entity already present in the network, registers the entity 
E as an acquaintance of that entity if and only if the two 
entities communicate with each other subsequently. 

The network of acquaintances may be implemented in 
different ways. For example, it may take the form of a 

35 table of dynamic acquaintances in the memory of the LPU 10, 
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i.e. a table of correspondences associating each electronic 
entity with its acquaintances. The network of acquaintances 
may instead be divided between the memories of each of the 
electronic entities, each of which then knows its own 
5 acquaintances. 

Diverse variants of and improvements to the 
embodiment described above may be envisaged. 

The LPU may be seen as an electronic entity always 
connected to the system. It then has its own identifier, 

10 service or family code and mailbox for receiving messages 
from other electronic entities, and is referred to as a 
"participating LPU". 

One of the electronic entities may be accessible 
indirectly through any open network via a rerouting or 

15 proxy system. The LPU may then serve as a proxy for that 
remote entity. 

A time to live (TTL) may be specified for a message 
awaiting its addressee. This eliminates messages that have 
become obsolete because their addressee disappeared a long 

20 time ago. In certain applications, the parameter TTL may 
also be set to a special value (for example the value 0) to 
cancel a message as soon as it is detected that its 
addressee is out of range of the LPU. 

The messages may be assigned a priority P. In this 

25 case, the communication mechanism handles the highest 
priority messages first. 

Depending on the intended application, it may be 
advantageous to use a call offering mechanism: an entity 
that requires a particular service sends a broadcast 

30 message to all the known electronic entities of the system, 
i.e. to all of the items in the list stored in the LPU. The 
interested entity or entities can send a proposal to 
provide the service that the requesting entity can accept 
or refuse according to its own criteria. 

35 The whole of the call offering mechanism (the 
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broadcast message, the responses and then the acceptance 
message from the requesting entity) uses the communication 
method of the invention. At the end of the call offer, the 
LPU may complete its table of dynamic acquaintances, for 
5 example by indicating whether a particular entity knows how 
to provide this kind of service. 

A TTL parameter may be associated with the 
broadcast message. 

If a new entity enters the radius of action of the 

10 LPU , a particular broadcast message is broadcast to all the 
entities already present in the network and indicates in 
particular the identity of the incomer and its service or 
family code. This mechanism is known as the "broadcast on 
incoming" mechanism. 

15 In a similar manner, if an electronic entity leaves 

the radius of action of the LPU, a particular broadcast 
message is broadcast to all the entities still present in 
the network. This message indicates in particular the 
identifier of the departing entity and its service or 

20 family code and this mechanism is known as the "broadcast 
on outgoing" mechanism. 

If a plurality of electronic entities participate 
in a distributed calculation, it is possible to regard the 
sending of a message Ml from an entity El to an entity E2 

25 as a calculation request. An explicit calculation 
continuation entity E3 may be specified in the message. 
Accordingly, when the entity E2 has finished the 
calculation effected on reception of the elements of the 
message Ml, it sends a calculation continuation request by 

30 sending a message M2 to the entity E3. 

Different examples of the use of the invention are 
given next. 

First of all, in the field of air passenger 
loyalty, consider a passenger who has a loyalty card for 
35 airline X. The passenger purchases a transport ticket from 
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the company X and goes to the VIP lounge to await boarding. 

A hostess carries a new generation location 
terminal capable of using the mechanism of the present 
invention. She holds a hostess card with a clientele 
5 management application. 

When the passenger passes near the terminal of the 
hostess, his loyalty card and ticket declare themselves to 
the terminal. After appropriate authentication, the hostess 
card asks the transport ticket for the identity of the 
10 passenger and asks the loyalty card for the number of 
loyalty points associated with that passenger. 

If the hostess card detects a loyal customer 
(having a number of loyalty points exceeding a particular 
threshold) , the hostess offers the passenger his preferred 
15 drink, for example, this information being stored in the 
loyalty card. The hostess card then transfers to the 
loyalty card a voucher valid in one of the shops of the 
departure lounge, for example. 

By way of a second example, consider a customer 
20 having in his wallet a bank card and a loyalty card. In 
addition to their standard mode of operation, the two cards 
know how to communicate securely via a contactless 
interface . 

Consider also a merchant having a new generation 
25 payment terminal capable of using the mechanism of the 
present invention . 

The customer makes a payment with his bank card by 
entering his PIN in the usual way, but without having to 
take his bank card out of his wallet. Once the payment has 
30 been validated, the bank card sends a broadcast message to 
search for a loyalty service for the store in which the 
purchase has just been effected. The loyalty card proposes 
its services by specifying that it accepts the task of 
storing loyalty points in accordance with the request from 
35 the bank card. 
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The bank card then transmits to the loyalty card 
the number of loyalty points to be credited to the account 
of the customer, and the loyalty card credits those points. 

If the wallet of this customer contains another 
5 loyalty card, such as the card of a transport operator, 
this other card may also ask the bank card the nature of 
the purchase before proposing its services. The three 
electronic entities then communicate. 

In order to secure the exchanges between these 

10 different entities, a fourth electronic entity (SHM type 
secure electronic entity) may be inserted into the body of 
the payment terminal and participate in certain 
authentication operations on behalf of the other three 
electronic entities . 

15 An example of the application of the invention to 

personalizing objects is described next. The term 
"personalization" means the writing of personal data 
specific to an object in or on the object by mechanical, 
electronic, optical, chemical or any other means. 

20 Consider a personalization machine comprising a 

plurality of stations. The object to be personalized is 
placed for a particular time in front of each station and 
then moved to the next station. Because the timing of the 
movement from one station to another is not strictly 

25 defined, some messages may be lost during the movement from 
one station to the next. 

Figure 4 shows a device of this kind. An LPU 40 is 
connected to a security hardware module SHM 42 and to three 
antennas al, a2, a3 each designated by the reference number 

30 46. Each of the antennas 46 corresponds to a workstation of 
a machine for personalizing objects 44 that move from 
station to station. The SHM 42 contains the necessary 
personalization information. The arrow 48 in the diagram 
delimits a "shadow area", which is an area of radio- 

35 frequency interference through which the object to be 
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personalized passes between two successive workstations. 

Here the invention applies advantageously to the 
electronic entities consisting of the SHM 42 and the object 
44 to be personalized. Thus the object disappears from the 
5 list of dynamic acquaintances when it enters the area 48 
and then reappears in the list when it is in front of a new 
workstation . 

When the object is in the area 48, current messages 
are saved in mailboxes according to the invention, as 

10 described above. There is therefore continuity of 
communication between the object 44 and the SHM 42 via the 
LPU 40 and the different antennas 46. 

More generally, the method of the invention 
provides continuity of communication involving an 

15 electronic entity and an antenna from a plurality of 
antennas connected to a communication management unit if 
this electronic entity moves in such a manner that the 
communication involves another antenna from the 
abovementioned plurality of antennas. 

20 Finally, the present invention may advantageously 

be used for the secure personalization of an ob j ect 
including a first secure set consisting of a first storage 
unit and a first microcircuit by a personalization method 
that employs n-1 secure sets in addition to the first 

25 secure set, n being an integer strictly greater than 2, 
each of the secure sets consisting of a storage unit and a 
microcircuit and forming with the object an authorized n- 
tuplet known to at least one of the secure sets, and the 
personalization method including a plurality of mutual 

30 authentication steps of pairs of secure sets, prior to a 
personalization step consisting in writing personal data 
specific to this object on or in this object. 

One or more of the microcircuit s previously cited 
may be adapted to communicate with the external environment 

35 using a contactless technology. 
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The object to be personalized is a document issued 
by the state, for example, such as an identity card, a 
passport, a visa, a vehicle registration document, or any 
other document of an official nature, such as a notarized 
5 document, a transport ticket such as a season ticket for 
use of public transport, or a travel document, such as a 
driver's license or a toll ticket or other proof of a right 
of transit, for example of the type issued by the 
authorities of Mexico City so that motorists may enter the 
10 city. 

The n-1 secure sets mentioned above may be taken 

from: 

- a secure set representing a batch of objects to 
be personalized, 

15 - a secure set including a secure electronic entity 

associated with a machine adapted to personalize the 
objects of this batch, and 

- a secure set attached to an operator authorized 
to use the machine. 

20 This enables secure personalization of any object 

forming part of a batch, such as an identity card taken 
from an initial batch of cards to be personalized, 
personalization being effected by means of an approved 
machine identified by an associated machine secure module, 

25 operated by an approved operator identified by an operator 
microcircuit card in his possession, for example, which 
identifies him uniquely. 

For more details of this personalization method, 
see French patent application N° 02 15551. 



